feat: Add support for Amazon CloudWatch Observability IRSA role

[JoeNorth]

Description

feat: Add support for Amazon CloudWatch Observability IRSA role

Motivation and Context

Adding support for creating IRSA role for Amazon CloudWatch Observability add-on

Breaking Changes

N/A

How Has This Been Tested?

• I have updated at least one of the examples/* to demonstrate and validate my change(s)
• I have tested and validated these changes using one or more of the provided examples/* projects

• I have executed pre-commit run -a on my pull request

[JoeNorth]

Currently running into an issue in testing these changes. Attempting to deploy example/am-role-for-service-accounts-eks results in the following error:

│ Error: Invalid template interpolation value
│ 
│   on ../../modules/iam-role-for-service-accounts-eks/main.tf line 10, in locals:
│   10:   role_name_condition = var.role_name != null ? var.role_name : "${var.role_name_prefix}*"
│     ├────────────────
│     │ var.role_name_prefix is null
│ 
│ The expression result is null. Cannot include a null value in a string template.

This issue is also present in the master branch. @bryantbiggs thoughts?

[bryantbiggs]

thanks! The error was the example here https://github.com/terraform-aws-modules/terraform-aws-iam/pull/446/files#diff-2ba4c6896f0e2eaef7e8dd3128c6c92985731db0a77e40313e8213e78a19db3aR28

[bryantbiggs]

since this is already covered in the CloudWatchAgentServerPolicy managed policy - we can actually just use the two managed policies as is without a custom policy

[antonbabenko]

This PR is included in version 5.33.0 🎉

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.